EUVD-2021-11088

Malware in sbrugna...

CVE-2021-24174

The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the database, change the plugin's settings and delete backups...

PT-2021-15720

Name of the Vulnerable Software and Affected Versions: Database Backups WordPress plugin versions prior to 1.2.2.7 Description: The issue allows attackers to perform unwanted actions on a logged-in user's account, such as generating database backups, changing plugin settings, and deleting backups...

CVE-2021-24174: Cross-Site Request Forgery (CSRF)

The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the database, change the plugin's settings and delete backups...